Cookie Policy
Tallyd (Pty) Ltd Effective Date: [To be confirmed before launch] Last Updated: 3 April 2026
This Cookie Policy explains what cookies and similar storage technologies are used by Tallyd (Pty) Ltd ("Tallyd", "we", "us", or "our") on our website at tallyd.co.za and our dashboard application at app.tallyd.co.za (together, the "Services").
This policy should be read alongside our Privacy Policy and Terms of Service.
1. What Are Cookies?
Cookies are small text files placed on your device by a website or application. They allow the site to recognise your browser, maintain your session, and remember preferences between visits. Some cookies are stored in your browser's cookie storage; others may use browser local storage or session storage to achieve similar purposes.
2. Cookies We Use
Tallyd uses only strictly necessary and functional cookies. We do not use any advertising, tracking, or analytics cookies.
2.1 Strictly Necessary Cookies
These cookies are essential for the Services to function. Without them, you cannot log in or maintain an authenticated session. They cannot be disabled.
| Cookie / Storage Item | Purpose | Storage Mechanism | Lifespan | Set By |
|---|---|---|---|---|
| Supabase access token | Authenticates your session with our API. Contains a signed JWT with your user identity and organisation role. | httpOnly cookie | 1 hour (auto-refreshed) | Tallyd / Supabase Auth |
| Supabase refresh token | Renews your access token without requiring you to log in again. Rotated on each use for security. | httpOnly cookie | 7 days | Tallyd / Supabase Auth |
How these work: When you log in to the Tallyd dashboard (via email and password or magic link), our authentication provider (Supabase Auth) issues an access token and a refresh token. The access token expires after one hour and is automatically renewed using the refresh token. If the refresh token expires (after 7 days of inactivity), you will be prompted to log in again. Refresh token reuse detection is enabled — if a token is used more than once (indicating potential theft), the entire token family is revoked for your protection.
2.2 Functional Cookies
These cookies remember your preferences to improve your experience. They do not collect personal information beyond the preference you have set.
| Cookie / Storage Item | Purpose | Storage Mechanism | Lifespan | Set By |
|---|---|---|---|---|
Theme preference (tallyd-theme) | Remembers whether you selected dark mode or light mode | Browser local storage | Persistent (until you clear browser data or change the setting) | Tallyd |
2.3 Cookies We Do Not Use
Tallyd does not use:
- Analytics cookies — We do not use Google Analytics, Mixpanel, Hotjar, or any similar analytics or session-replay tools.
- Advertising cookies — We do not serve ads or use tracking pixels.
- Social media cookies — We do not embed social media widgets that set cookies.
- Third-party tracking cookies — No third party sets cookies through our Services for the purpose of tracking your activity across websites.
If we introduce any analytics or third-party cookies in the future, we will update this policy and provide appropriate notice before deploying them.
3. POPIA and Cookies
South Africa's Protection of Personal Information Act (POPIA) does not contain a specific "cookie law" equivalent to the EU's ePrivacy Directive. However, POPIA's general principles apply to any processing of personal information, including information collected via cookies.
Because Tallyd uses only:
- Strictly necessary cookies required to deliver the service you have requested (authenticated dashboard access), and
- Functional cookies that store a single non-personal preference (theme choice),
we rely on legitimate interest (POPIA s11(1)(f)) and contract performance (POPIA s11(1)(b)) as lawful bases for this processing. A separate opt-in consent mechanism is not required for these categories under POPIA, as they do not involve tracking, profiling, or the collection of personal information for purposes beyond service delivery.
Should we ever introduce cookies that process personal information for analytics, marketing, or profiling purposes, we will implement an appropriate consent mechanism before doing so.
4. How to Manage Cookies
You can manage or delete cookies through your browser settings. Note that:
- Disabling strictly necessary cookies will prevent you from logging in to the Tallyd dashboard. The application cannot function without them.
- Clearing local storage will reset your theme preference to the default (dark mode).
Instructions for managing cookies in common browsers:
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies
5. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in our use of cookies or applicable law. When we make changes, we will update the "Last Updated" date at the top of this page. If we introduce new categories of cookies (such as analytics), we will provide prominent notice on our website.
6. Contact Us
If you have questions about our use of cookies, contact us at:
- Email: info@tallyd.co.za
- Information Officer: [Name to be confirmed]
- Postal Address: [To be confirmed — Gauteng, South Africa]
For broader privacy enquiries or to exercise your rights under POPIA, please refer to our Privacy Policy.
This Cookie Policy is specific to the Tallyd traffic analytics platform and should be read together with our Privacy Policy and Terms of Service.